Network Security

we have remote access vpn user and we wish to control their IP access on the network. Which acl's need to be applied and where to allow and block access to the internal network?The setup is:home vpn user --> Internet --> ASA5500 --> internal demarc ...

So, I have a IDSM-2 module in a 6513 switch. When I try to login to the device I get the follow error:login: PAM Failure, aborting: Critical error - immediate abortThis looks like a Linux error, at least Google searchs show that it happens in linux ...

Hi,I have some users on the external network. I have a timeout of 4hrs say. I want them to have a pre warning before they are disconnected from the system. Is this possible ? It seems rather annoying just kicking people out ?Using PIX 515E and Cisco ...

Hi,I have just upgraded ASA5540 to code 8.2(1) and ASDM 6.2(1). But now, I can't start ASDM because of "Your firewall image has a version number null which is not supported by ASDM 6.2(1)" message. Any idea?Thanx in advanceRadim

I'm running 8.2 code. I'd like to have an EIGRP learned path take precedence over a backup VPN tunnel between two sites.I ran into problems that seemed to be due to the L2L network on the VPN getting injected into the routing table as a static route...

As stated in the Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide Using the CLI Release 4.0.pdf, "If you do not want the overhead of security contexts, or want to maximize your use of security cont...

I have a site-to-site vpn with two 2811 Cisco Routers with 2 interfaces each(LAN and WAN) and a GRE Tunnel. I have an ACL implemented to allow some PCs to have access to the VPN and another PCs to have access to Internet but deny access to vpn.I want...

this is my result after change access-group dmz3_access_in in interface dmz3ICMP echo request from dmz3:17.50.1.22 to inside:172.20.1.53 ID=1024 seq=23040 len=32what does this is mean ? please explain me

Hello experts, I'm doing authentication on the firewall for HTTP and HTTPS traffic. It is working fine for the HTTP, but it does not work for HTTPS, do I require virtual http? even with that I was not getting the prompt, I was able to access directly...

I installed a new Internet router and ASA5510 cluster as the following, if looking from ISP:ISP -- router -- ASA5510 -- edge 6509router Loopback: 10.1.1.4router LAN port: 99.100.100.1router sends 99.100.100.0/24 to ISPASA management: 10.1.1.2ASA outs...

Hi all! I need to know which OIDs (SNMP) I can use to manage VPNs lan-to-lan that firewall establish.Firewall ASA. Aprecciate any help! Thank you

Hi, Is it possible to have two IPS 4200 appliances in a failover or high availability pair? Or is it single with hardware bypass only? Thanks

I have a laptop with 4gb ram and i have ubuntu jaunty installed on it. I browsed online including this forum and upgraded to linux server kernel to accommodate the 4gb ram.I had installed the vpnclient before that and was working just fine. This was ...

I'm working about a solution in-band.The topology is INET(untrust)-Router-CAS-SW_level3-CAM and servers(trust).My problem is that the users in untrust network have access to the trust network, they don't authenticate and don't apply any rule. The end...